d32d07884f30eff1d72acfd3177119d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d32d07884f30eff1d72acfd3177119d9_JaffaCakes118
Size

40KB
MD5

d32d07884f30eff1d72acfd3177119d9
SHA1

f1fed179e3f3c842d9e5983e113ce8d4e937e226
SHA256

806606d22561208ca7535dd31200584a3486efedad44bdea60311c408e8012e6
SHA512

15ca3e089fd1a3f53041062187aa692045a5899594754d1ca65d871764782142f32651f18fe4e2b54b617998a5adaac8f71470de1600654b2831b70ef95749a4
SSDEEP

384:DaJQsDnp3kE9ONek+vDWJBXQnLQRId9qiIjbuJKHEiviudWY6Bn97pq:Aj93z9S8LQW9bIKf+igWY6Br

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d32d07884f30eff1d72acfd3177119d9_JaffaCakes118

Files

d32d07884f30eff1d72acfd3177119d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dbd474bf3d6994453cb2c9fdaa8e1b14

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord666
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ProcCallEngine
ord537
ord644
ord681
ord576
ord100

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ